Wireshark Training and Certification in Kuala Lumpur, Malaysia

This course provides hands-on training in Wireshark, the industry-standard network protocol analyzer, used for packet analysis, troubleshooting, and network security monitoring. Participants will learn how to capture, filter, and analyze network traffic, identify security threats, diagnose network performance issues, and apply forensic techniques for deep packet inspection.

Course Agenda

Introduction to Wireshark

• Overview of Wireshark features and capabilities

• Installing and configuring Wireshark on Windows/Linux/macOS

• Understanding the Wireshark interface and navigation

• Capturing network traffic live vs. offline analysis

Packet Capture and Filtering

• Setting up capture filters vs. display filters

• Capturing packets on wired, wireless, and VPN networks

• Filtering protocols (TCP, UDP, HTTP, DNS, ICMP, SSL/TLS, etc.)

• Using BPF (Berkeley Packet Filter) syntax for advanced filtering

Protocol Analysis and Troubleshooting

• Analyzing TCP Handshake, retransmissions, and latency issues

• Investigating DNS resolution failures and HTTP/HTTPS traffic

• Identifying bandwidth consumption and slow network performance

• Troubleshooting VoIP, streaming, and encrypted traffic

Network Security and Threat Detection

• Recognizing common attack patterns in packet data

• Detecting man-in-the-middle (MITM) attacks and ARP spoofing

• Analyzing malware communications and suspicious traffic

• Extracting files and credentials from captured packets

Wireshark for Network Forensics

• Reconstructing network sessions and investigating breaches

• Using Wireshark for incident response and compliance audits

• Correlating log data with packet captures for forensic investigations

• Exporting and sharing capture files for analysis

Advanced Wireshark Features and Automation

• Scripting Wireshark with Tshark and Lua

• Creating custom dissectors and protocol analysis scripts

• Automating packet capture and log analysis

• Integrating Wireshark with SIEM and intrusion detection systems